@camcima/finita 2.1.0 → 2.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +23 -1
- package/package.json +7 -3
package/README.md
CHANGED
|
@@ -6,7 +6,8 @@
|
|
|
6
6
|
|
|
7
7
|
<br>
|
|
8
8
|
|
|
9
|
-
[](https://github.com/camcima/finita/actions/workflows/ci.yml)
|
|
9
|
+
[](https://github.com/camcima/finita/actions/workflows/ci.yml)
|
|
10
|
+
[](https://github.com/camcima/finita/security/code-scanning)
|
|
10
11
|
[](https://codecov.io/gh/camcima/finita)
|
|
11
12
|
[](https://www.npmjs.com/package/@camcima/finita)
|
|
12
13
|
[](https://opensource.org/licenses/MIT)
|
|
@@ -188,6 +189,27 @@ src/
|
|
|
188
189
|
error/ # Custom error classes
|
|
189
190
|
```
|
|
190
191
|
|
|
192
|
+
## Security
|
|
193
|
+
|
|
194
|
+
### CI
|
|
195
|
+
|
|
196
|
+
- **CodeQL** -- static analysis for security vulnerabilities (push, PR, weekly)
|
|
197
|
+
- **OSV-Scanner** -- dependency vulnerability scanning against the [OSV database](https://osv.dev/) (push, PR, weekly)
|
|
198
|
+
- **Dependabot** -- automated PRs for dependency and GitHub Actions updates (weekly)
|
|
199
|
+
|
|
200
|
+
### Local (via Lefthook)
|
|
201
|
+
|
|
202
|
+
- **Gitleaks** -- scans staged files for secrets on every commit (auto-skipped if not installed)
|
|
203
|
+
|
|
204
|
+
### Manual checks
|
|
205
|
+
|
|
206
|
+
```bash
|
|
207
|
+
npm run security:audit # npm dependency audit
|
|
208
|
+
npm run security:secrets # Scan full repo for secrets (requires gitleaks)
|
|
209
|
+
```
|
|
210
|
+
|
|
211
|
+
Install Gitleaks: <https://github.com/gitleaks/gitleaks#installing>
|
|
212
|
+
|
|
191
213
|
## Development
|
|
192
214
|
|
|
193
215
|
```bash
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@camcima/finita",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.2.0",
|
|
4
4
|
"description": "A full-featured finite state machine library for TypeScript",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/index.cjs",
|
|
@@ -29,6 +29,8 @@
|
|
|
29
29
|
"lint": "tsc --noEmit && tsc --project tsconfig.test.json && eslint src/ tests/",
|
|
30
30
|
"format": "prettier --write .",
|
|
31
31
|
"format:check": "prettier --check .",
|
|
32
|
+
"security:audit": "npm audit",
|
|
33
|
+
"security:secrets": "gitleaks detect --no-banner",
|
|
32
34
|
"release": "release-it",
|
|
33
35
|
"prepare": "lefthook install"
|
|
34
36
|
},
|
|
@@ -53,6 +55,8 @@
|
|
|
53
55
|
},
|
|
54
56
|
"license": "MIT",
|
|
55
57
|
"devDependencies": {
|
|
58
|
+
"@commitlint/cli": "^20.5.0",
|
|
59
|
+
"@commitlint/config-conventional": "^20.5.0",
|
|
56
60
|
"@eslint/js": "^10.0.1",
|
|
57
61
|
"@types/node": "^25.5.2",
|
|
58
62
|
"@vitest/coverage-v8": "^3.2.4",
|
|
@@ -62,8 +66,8 @@
|
|
|
62
66
|
"prettier": "^3.8.1",
|
|
63
67
|
"release-it": "^19.2.4",
|
|
64
68
|
"tsup": "^8.5.1",
|
|
65
|
-
"typescript": "^
|
|
69
|
+
"typescript": "^6.0.2",
|
|
66
70
|
"typescript-eslint": "^8.57.2",
|
|
67
|
-
"vitest": "^3.
|
|
71
|
+
"vitest": "^3.2.4"
|
|
68
72
|
}
|
|
69
73
|
}
|